Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
Unlock{Ful...va.exe
windows7-x64
10Unlock{Ful...va.exe
windows10-2004-x64
10Unlock{Ful...mo.dll
windows7-x64
3Unlock{Ful...mo.dll
windows10-2004-x64
3Unlock{Ful...GL.dll
windows7-x64
1Unlock{Ful...GL.dll
windows10-2004-x64
1Unlock{Ful...v2.dll
windows7-x64
1Unlock{Ful...v2.dll
windows10-2004-x64
1Unlock{Ful.../nw.js
windows7-x64
1Unlock{Ful.../nw.js
windows10-2004-x64
1Unlock{Ful...mo.dll
windows7-x64
3Unlock{Ful...mo.dll
windows10-2004-x64
3Unlock{Ful...GL.dll
windows7-x64
1Unlock{Ful...GL.dll
windows10-2004-x64
5Unlock{Ful...v2.dll
windows7-x64
1Unlock{Ful...v2.dll
windows10-2004-x64
1Unlock{Ful.../nw.js
windows7-x64
1Unlock{Ful.../nw.js
windows10-2004-x64
Analysis
-
max time kernel
98s -
max time network
359s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
11/09/2022, 10:17
Static task
static1
Behavioral task
behavioral1
Sample
Unlock{Full_Version}/Setupcanva.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Unlock{Full_Version}/Setupcanva.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Unlock{Full_Version}/bin/win32/ffmpegsumo.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Unlock{Full_Version}/bin/win32/ffmpegsumo.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
Unlock{Full_Version}/bin/win32/libEGL.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
Unlock{Full_Version}/bin/win32/libEGL.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
Unlock{Full_Version}/bin/win32/libGLESv2.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
Unlock{Full_Version}/bin/win32/libGLESv2.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
Unlock{Full_Version}/bin/win32/nw.js
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
Unlock{Full_Version}/bin/win32/nw.js
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
Unlock{Full_Version}/bin/win64/ffmpegsumo.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
Unlock{Full_Version}/bin/win64/ffmpegsumo.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
Unlock{Full_Version}/bin/win64/libEGL.dll
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
Unlock{Full_Version}/bin/win64/libEGL.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
Unlock{Full_Version}/bin/win64/libGLESv2.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
Unlock{Full_Version}/bin/win64/libGLESv2.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
Unlock{Full_Version}/bin/win64/nw.js
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
Unlock{Full_Version}/bin/win64/nw.js
Resource
win10v2004-20220812-en
General
-
Target
Unlock{Full_Version}/bin/win64/ffmpegsumo.dll
-
Size
991KB
-
MD5
83d7e2b05e7fab09258f6763154ce1a2
-
SHA1
bd80808b0a5b1e32cad270506ca89653a081f3a7
-
SHA256
f0c4ff613908c0a7b6d3c893984bbd8d63ae21de32d01b45a706667aacff43c6
-
SHA512
e15524a791118310745645f15c23cd6f8d004c946eb1d3aaea6ab4c4a1300762dad354d374b3bcd029fd30e9fcc54743ae8b4ccb76c7a26b92905de808c83302
-
SSDEEP
24576:Ms58Z15Ngksc9s0a8wTMMwhmSAzL7aGZELDKPPTykTCO76:MQ2Zgksc9s0aBTMWCO
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 1272 2904 WerFault.exe 39
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\Unlock{Full_Version}\bin\win64\ffmpegsumo.dll,#11⤵PID:2904
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2904 -s 3402⤵
- Program crash
PID:1272
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 408 -p 2904 -ip 29041⤵PID:3432